1. Introduction
This Privacy Policy describes how Tradyard Inc. ("Tradyard," "we," "us," "our") collects, uses, discloses, and otherwise processes personal information in connection with our website (tradyard.com), mobile applications, and related services (collectively, the "Platform").
We are committed to protecting your privacy and ensuring transparency about how we handle your data. This Privacy Policy applies to all users of the Platform, including buyers, sellers, and visitors.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Platform.
This Privacy Policy was last updated on March 1, 2026. We may update this policy periodically to reflect changes in our practices or for other operational, legal, or regulatory reasons. Your continued use of the Platform after changes constitute your acceptance of the updated Privacy Policy.
2. Information We Collect
Information You Provide Directly:
- Account Registration: Name, email address, phone number, password, business information (for sellers), and profile preferences.
- Transactions: Billing address, shipping address, payment information (processed securely via Stripe).
- Communications: Messages, inquiries, support tickets, and feedback you send us.
- Auction & Bidding: Bid history, watchlist items, and auction participation records.
- Document Uploads: Business licenses, tax documents, identification, and product images (for sellers).
Information Collected Automatically:
- Device & Browser: IP address, browser type, operating system, device identifiers, and user agent.
- Usage Data: Pages visited, time spent, clicks, searches, and interaction patterns via cookies and analytics tools.
- Location Data: Approximate location derived from IP address (not precise GPS).
- Payment Processing: Transaction IDs, payment method type (last 4 digits), and billing/shipping details (via Stripe).
Information from Third Parties:
- Google OAuth: Name, email, and profile picture (if you sign in via Google).
- Payment Processors: Fraud indicators, verification results, and transaction confirmations from Stripe.
- Service Providers: Analytics and security partners provide insights about Platform usage and threat detection.
Legal Basis (PIPEDA Compliance):
We collect information with your explicit or implied consent, or as necessary to perform contractual obligations or comply with legal requirements.
3. How We Use Your Information
Core Platform Functions:
- Account Management: Creating and maintaining your account, verifying identity, and enabling login.
- Transactions: Processing orders, managing bids, facilitating payments, and issuing receipts.
- Auctions: Managing bidding, recording bid history, determining winners, and facilitating delivery.
- Communications: Sending order confirmations, bid notifications, updates, and customer support responses.
Service Improvement:
- Analytics: Understanding user behavior, identifying trends, and optimizing the Platform.
- Personalization: Recommending products, customizing your experience, and suggesting relevant listings.
- Fraud Prevention: Detecting and preventing fraudulent activity, protecting account security.
- A/B Testing: Testing new features and improvements based on usage patterns.
Marketing & Outreach (with Your Consent):
- Promotional Emails: Product updates, special offers, and newsletters (you can opt-out anytime).
- Event Invitations: Inviting you to webinars, auctions, and community events.
- Surveys & Feedback: Requesting your input to improve our services.
Legal & Compliance:
- Regulatory Compliance: Meeting tax, financial, and reporting obligations under Canadian law.
- Dispute Resolution: Resolving complaints, handling refund requests, and managing disputes.
- Law Enforcement: Responding to legal requests, subpoenas, or court orders from authorized authorities.
- Terms Enforcement: Preventing abuse, enforcing policies, and protecting user safety.
We do not sell or share personal information with third parties for their marketing purposes without your explicit consent.
4. Data Security & Storage
Security Measures:
- Encryption: All data transmitted over HTTPS using SSL/TLS encryption.
- Payment Data: Payment information is handled securely via PCI-DSS compliant Stripe integration.
- Access Controls: Only authorized employees have access to personal information on a need-to-know basis.
- Authentication: Passwords are hashed using industry-standard algorithms; we recommend using strong, unique passwords.
- Regular Audits: We conduct security assessments and vulnerability testing to maintain platform integrity.
Data Retention:
- Active Accounts: Personal information is retained while your account is active.
- Inactive Accounts: Upon account deletion, we retain minimal data (transaction history, audit logs) as required by law for 7 years.
- Marketing Data: If you opt-out of marketing, we retain your email to honor your preference for 2 years.
- Cookies: Most cookies expire after 1 year; you can clear them anytime via browser settings.
Data Breach Notification:
In the event of a confirmed data breach affecting your personal information, we will notify you without unreasonable delay and provide guidance on protective measures, as required by applicable privacy laws.
Limitations:
While we employ industry-standard security practices, no system is completely secure. We cannot guarantee absolute security of your information.
5. Your Privacy Rights
Under PIPEDA (Personal Information Protection and Electronic Documents Act):
You have the right to:
- Access: Request a copy of all personal information we hold about you.
- Correction: Request corrections to inaccurate or incomplete information.
- Deletion: Request deletion of your personal information (subject to legal retention requirements).
- Opt-Out: Opt-out of marketing communications, cookies, and promotional emails at any time.
- Data Portability: Request your information in a portable format for transfer to another service.
- Withdraw Consent: Withdraw consent for specific data uses (except where contractually necessary).
Consumer Protection Act (Ontario):
You may also exercise rights under provincial consumer protection legislation, including dispute resolution and refund procedures.
How to Exercise Your Rights:
Submit a written request to support@tradyard.com with "Privacy Request" in the subject line, along with:
- Your full name and account email
- Description of the information or action requested
- Any supporting documentation
We will respond within 30 days. If we require additional information to verify your identity, we will request it promptly.
Right to Complain:
If you believe we have violated your privacy rights, you may file a complaint with the Office of the Privacy Commissioner of Canada.
7. Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or need to report a privacy concern, please contact us:
Tradyard Inc.
Privacy & Compliance Team
📧 support@tradyard.com
For Urgent Privacy Matters:
Include "Privacy Request" or "Data Breach" in your email subject line for expedited review.
Mailing Address:
Tradyard Inc.
Toronto, Ontario
Canada
We will make reasonable efforts to respond to all inquiries within 10 business days. For data access or deletion requests, we will respond within 30 days as required by PIPEDA.
If you are not satisfied with our response to a privacy concern, you may file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.